CVE-2024-24568: medium-severity vulnerability in OISF suricata
Suricata http2: header handling evasion
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Suricata's HTTP/2 header inspection rules can be bypassed using specially crafted network traffic, allowing malicious content to slip through the security monitoring system undetected.
The HTTP/2 header handling in Suricata prior to version 7.0.3 contains a logic flaw (CWE-284) that allows attackers to craft malformed headers to evade rule-based detection. An attacker on the network path can send specially crafted HTTP/2 traffic to bypass security rules, reducing detection effectiveness of intrusion detection/prevention capabilities.
In the same product, most dangerous first.